CVE-2001-0398: High severity Ritlabs The Bat vulnerability

Published May 24, 2001

Updated

The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon.

Affected Software

40 affected components

Ritlabs The Bat=1.0_build1336

Ritlabs The Bat=1.0_build1349

Ritlabs The Bat=1.1

Ritlabs The Bat=1.011

Ritlabs The Bat=1.14

Ritlabs The Bat=1.15

Ritlabs The Bat=1.015

Ritlabs The Bat=1.17

Ritlabs The Bat=1.18

Ritlabs The Bat=1.19

Ritlabs The Bat=1.21

Ritlabs The Bat=1.22

Ritlabs The Bat=1.028

Ritlabs The Bat=1.029

Ritlabs The Bat=1.31

Ritlabs The Bat=1.031

Ritlabs The Bat=1.32

Ritlabs The Bat=1.032

Ritlabs The Bat=1.33

Ritlabs The Bat=1.34

Ritlabs The Bat=1.035

Ritlabs The Bat=1.35

Ritlabs The Bat=1.036

Ritlabs The Bat=1.36

Ritlabs The Bat=1.037

Ritlabs The Bat=1.39

Ritlabs The Bat=1.039

Ritlabs The Bat=1.041

Ritlabs The Bat=1.41

Ritlabs The Bat=1.42

Ritlabs The Bat=1.42f

Ritlabs The Bat=1.043

Ritlabs The Bat=1.43

Ritlabs The Bat=1.44

Ritlabs The Bat=1.45

Ritlabs The Bat=1.46

Ritlabs The Bat=1.47

Ritlabs The Bat=1.48

Ritlabs The Bat=1.49

Ritlabs The Bat=1.101

Remediation

Patch Available

http://www.securityfocus.com/bid/2530

Event History

May 24, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0398?

CVE-2001-0398 is considered a moderate severity vulnerability.

How do I fix CVE-2001-0398?

To fix CVE-2001-0398, upgrade to a patched version of The BAT! mail client that addresses this vulnerability.

What types of attack are possible with CVE-2001-0398?

CVE-2001-0398 allows remote attackers to bypass executable attachment warnings, potentially leading to arbitrary command execution.

Which versions of The BAT! are affected by CVE-2001-0398?

CVE-2001-0398 affects several versions of The BAT!, including versions 1.0 through 1.49.

Is there a workaround for CVE-2001-0398?

A temporary workaround for CVE-2001-0398 is to avoid opening email attachments that have unusual file names with excessive spaces.